CVE-2020-24717

OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777.
References
Link Resource
https://jira.ixsystems.com/browse/NAS-107270 Exploit Issue Tracking Patch Third Party Advisory
https://github.com/openzfs/zfs/commit/716b53d0a14c72bda16c0872565dd1909757e73f Patch Third Party Advisory
https://reviews.freebsd.org/D26107 Issue Tracking Patch Third Party Advisory
https://github.com/openzfs/zfs/compare/zfs-0.8.4...zfs-2.0.0-rc1 Patch Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:openzfs:openzfs:*:*:*:*:*:*:*:*
cpe:2.3:o:freebsd:freebsd:-:*:*:*:*:*:*:*

Information

Published : 2020-08-27 12:15

Updated : 2020-09-04 09:20


NVD link : CVE-2020-24717

Mitre link : CVE-2020-24717


JSON object : View

CWE
CWE-276

Incorrect Default Permissions

Advertisement

dedicated server usa

Products Affected

openzfs

  • openzfs

freebsd

  • freebsd